Information Security Risk Specalist

Kavaliro is seeking an RMF Specialist/ISSO to support a client in Hawaii.

You Have:

• 3+ years of experience supporting RMF authorization activities, such as NIST SP 800-37 or SP 800-53, on DoD or IC information systems


• Experience with continuous monitoring tooling such as ACAS, Nessus, SCAP, or STIG Viewer, and vulnerability remediation coordination


• Experience with categorization methodology under FIPS 199 and NIST SP 800-60, and with impact-level determinations for classified or national security systems under CNSSI 1253


• Knowledge of eMASS, including package population, artifact management, POA&M tracking, and control inheritance or hybrid control management


• Ability to read, interpret, and apply control assessment procedures and produce assessment-ready documentation without extensive rework


• Ability to document security rationale clearly enough for AO or SCA review without additional translation by the ISSM


• TS/SCI clearance


• HS diploma or GED


• Information Security Certification, including CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ Certification

Nice If You Have:

• Experience with defense or national security-related issues in the Indo-Pacific region


• Experience with NIST 800-53 and DoD 8500 or 8510


• Experience with selecting, designing, and implementing security tools and capabilities for large, complex federal or commercial organizations


• Experience with Amazon Web Services (AWS), Azure, or Google Cloud Platform (GCP)


• Knowledge of the Enterprise Mission Assurance Support Service (eMASS)


• Knowledge of innovative cybersecurity capabilities, including AI and machine learning, Next-Generation Firewall (NGFW), and Big Data


• Knowledge of Mission Partner Engagement (MPE)


• Ability to assist in developing cybersecurity policies or governance frameworks


• Possession of excellent verbal and written communication skills


• Bachelor's degree

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.